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We present a quantum dialogue protocol by using the Greenberger-Horne-Zeilinger 

(GHZ) state. In this paper, we point out that the 'quantum dialogue' communication 

scheme recently introduced by Nguyen can be eavesdropped on under an intercept- 
CD ■ 

, and-resend attack. We also give a revised control mode to detect this attack. Hence, 



within the present version two users can exchange their secret messages securely and 
simultaneously, and the efficiency of information transmission can be successfully 
increased. 
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Since the pioneering work of Bennett and Brassarc 
turn key distribution protocols have been presented 
distribution protocol, some quantum direct secure communication (QDSC) protocols have 
been shown recently □ □ □ □ , which permit important messages to be communicated 
directly without first establishing a random key to encrypt them. However, these protocols 

Q Q, 0, S, y, 1, y, y, [3 only permit messages to be transmitted from the sender (Alice) 
to the receiver (Bob). Two parties cannot simultaneously transmit their different secret 
messages to each other in only one quantum channel. 
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Very recently, Nguyen |TJj proposed an entanglement-based protocol, the so-called quan- 
tum dialogue, which would allow two people to exchange their messages simultaneously based 
on the well-known Bostroem-Felbinger 3] protocol. Man et al. [l^ proposed a modified 
protocol about the quantum dialogue. It is worth mentioning that the Bostroem-Felbinger 

nn 

protocol can be eavesdropped in some specific cases [13, LLiJ ■ In this paper, we show that the 



quantum dialogue scheme [ll| is insecure under some eavesdropping attacks, and we present 
a new protocol to realize a quantum dialogue by using the GHZ state more securely. Thus, 
the two users can exchange their messages securely and simultaneously. The efficiency of 
information transmission is also successfully increased. 

Now, let us review Nguyen's quantum dialogue scheme. Suppose there are two users (say, 
Alice and Bob) and they want to transmit their messages to each other simultaneously. Bob 
first produces a large enough number of Einstein-Podolsky-Rosen (EPR) pairs, all in the 
state 

|*o,o)« = -^(| T)ft| i)t+\ i)h\ T)t), (1) 

where h stands for " home, " t stands for " travel, " and | j) and | f) characterize two degrees 
of freedom of a qubit. Bob encodes his bits (k n , l n ) (k n , l n e {0, 1}) by applying an operation 
Ck n j n on the state |\I/o,o)/it> where C 0) o, C 0j i, Ci j0 , and C^i denote the Pauli matrices I, a x , 
a y , and a z , respectively. He keeps one qubit (home qubit) with him and sends another 
(travel qubit) to Alice. Then, Bob lets Alice know that he has sent a qubit. Alice tells Bob 
that she has received a qubit. Alice encodes her bits (i n ,j n ) (i n ,j n € {0, 1}) by performing 
an operation Ci n .j n on the travel qubit; then, she sends it back to Bob. When Bob receives 
the encoded travel qubit, he performs a Bell basis measurement on the qubit pair and waits 
for Alice to tell him that it was a run in a message mode (MM) or in a control mode (CM). 
In a MM run, Bob decodes Alice's bits and announces his Bell basis measurement result 
(x n ,y n ) to let Alice decode his bits. In a CM run, Alice reveals her encoding value to Bob 
to check the security of their dialogue. 

However, this security checking cannot detect Eve's (eavesdropper's) intercept-and-resend 
attack. Let us suppose Eve gets the qubit t and keeps it with her. Afterwards, she creates 
her own entangled pair in the same state as in Eq. (P), i.e., Eve's pair state is 

|*o,o)ht = ^(| T>h| 1)t + \1)h\ T)t), (2) 
and sends her qubit T to Alice. Alice, taking T for t, encodes her bits by performing 
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an appropriate transformation as described above and sends it back to Bob. Then, Eve 
intercepts the qubit T again and carries out a Bell basis measurement on the HT- pair to 
learn Alice's secret bits. By the same Bell basis measurement, Eve knows the encoding 
transformation Alice performed on the qubit T. Eve then applies the same transformation 
on the qubit t she has kept and sends it back to Bob. After Bob announces publicly his 
Bell basis measurement result, Eve can deduce Bob's bits. Clearly, Eve can eavesdrop 
completely on the contents of Bob and Alice's dialogue. Even worse, Eve's tampering is 
absolutely unnoticeable. 

Now, we propose our new protocol to realize quantum dialogue by using the GHZ state 
in terms of the original scheme. However in our protocol the intercept-and-resend attack, 
as well as the other kinds of attacks presented by Nguyen [llj], can be detected. First, we 
write the eight GHZ state bases in two different bases as follows: 

|^o,o ; o,o) =-^(|000) + |111))m p 

= ~[|+Mi+) t |+>, + \-)t\-) P ) + \-)h(\+)t\-) P + \-)t\+) P )\, (3) 

lV>i,i;o,o> = -^(|000) - |lll)) h tp 

= ~[|+MI->*I+) P + l+> t |-> P ) + |-MI+> t |+> P + \-)t\-) P )], (4) 



i 



|V>o,i;0,o> =-^(|100) + |011)) h tp 



~[|+>fc(l+>*l+>P + |->*|->p) " h>fc(l+>*|->p + |->*I+>p)1, (5) 



|^,0;0,0) =-^(|l00)-|011» h tp 



\[\+U\+)tH P + \-)t\+) P ) - |->fc(|+>t|+>p + |->*|-> P )], (6) 



1 



|^0,0;0,l) =-^(|010) + 1101))^ 
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^[|+> fc (l+>t|+>„ " |->*|-> P ) + |->fc(l+>*|->p " |->*I+> P )], (7) 



l^i,i;0,i> =^(|010>-|101>W 



^[|+>fc(l+>*|->P " |->*I+>p) + |->*(I+>*I+>p " |->*|->p)], (8) 



|V>0,1;0,1> =^(|110> + |001»Mp 



^[|+>fc(l+>*l+>P - |->*|->p) + |->fc(|->*l+>P - I+>*|->p)], (9) 



l^i,o ; o,i> =^(|110>-|001>W 



^[|+> fc (l+>*|->p - l->*l+> P ) + I->*(I->*I->p " I+>*I+>p)], (io) 



where 



|+> = ^(|0> + |1», (11) 

|-> = ^(|0>-|1», (12) 

h stands for " home, " t stands for " travel, " and p stands for " post " . 

Suppose that Alice has a secret message consisting of AN bits; i.e., Alice's mes- 
sage = {(ii,ji,fi,gi), (12, j'2,/2,^2), • • • ,(}N,jN,fN,9N)}, where i n Jn,9n e {0,1}, 
fn—0- Bob has another secret message consisting of AN bits, too; i.e., Bob's message 
= {(k 1 ,l 1 ,w 1 ,v 1 ),(k 2 ,l2,W2,v 2 ), ■ ■ ■ ,(k M ,l M ,WM,v M )}, where k n ,l n ,v n G {0,1}, w n =0. 
For Bob and Alice, each of them can encode their own secret message (a, b, c, d) 
(a,b,d G [0,1], c = 0) by performing the unitary operation C* 6 <8> C v c d on the travelled 
qubits; \^ a ,b;c,d) = C U ® C cMo,o-,o,o) „ where C* , C^, C\ fl , C\ x , Cft >0 , and C£ ;1 denote P, 
o x , Oy, a\, P, and a v x , respectively. 

(SI) To securely exchange their messages or, in other words, to carry out a secret dialogue, 
Bob first produces a large enough number of GHZ states, all in the state |"?/>o,0;0,o)- Bob keeps 
particles h with him and chooses particles (t, p) as encoding- decoding group particles. Bob 
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and Alice arrange to only perform one of the eight operations on particles (h, p) as 

U = P ® P, U x = a\ ® F, C/ 2 = a* ® TP, [/ 3 = ® TP, 

(13) 

£4 = T* ® aP, U 5 = ai® aP, U 6 = o* x ® crP t/" 7 = itr* ® o* 

(52) Bob encodes his bits (k n ,l n ,w n ,v n ) by applying J7 B = C£ nA ® C p WnVn (B e 
{0,1,2,3,4,5,6,7}) on the GHZ state |"0o,O;O,o)- He keeps qubits h with him and sends 
qubits (t, p) through two different quantum channels to Alice. Then, Bob lets Alice know 
that he has sent qubits (t, p). 

(53) Alice confirms to Bob that she has received the qubits. Bob tells Alice which mode 
they are: the message mode (MM) run or the control mode (CM) run. If it is a CM (MM) 
run, the procedure goes to S4 (S5). 

(54) Alice selects randomly sufficiently large groups as checking groups and the groups 
leftover as encoding- decoding groups. She chooses randomly one of the two sets of measuring 
basis (MB), |J0), |1)} or {|+), |— )}, by measuring her qubits to check for the intercept-and- 
resend attack. She announces her choices and her measurement outcomes. Bob performs 
his measurement under the same MB as that chosen by Alice on the corresponding photons 
in his checking groups. If their measurement outcomes coincide when both of them use 
the same basis according to Eq. (}3*j) — (jlUj) . There are no Eves in line. This communication 
continues. In this case, Alice and Bob continue to transmit the next bits. Otherwise, they 
have to discard their transmission and abort the communication. 

(55) Alice encodes her bits (i n JnJn,9n) by applying U A =Cf n>jn ® C^ gn (A E 
{0,1,2,3,4,5,6,7}) on the encoding-decoding groups. Then, Alice sends back qubits (t, 
p) to Bob, and lets Bob know that. 

(56) Aware of Alice's confirmation, Bob performs a GHZ state basis measurement on the 
three qubits. The result in state \^( Xn ,y n );(r n ,s n ) ) ( 

e {0, l}) is 

\^(x n ,y n y,(r n ,s n )} = U B U A \lpO,0;0,o) 



C l knU ® Cl n>Vn ® C\ ndn ® C p fn J V> Q) o ; o,o> 
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>, (14) 

where © denotes an addition mod 2, 4>i,j-,k,i and (j>f, g ;w,v are phase factors (0 = 1 or ±i 
depending on the values of (i, j, k, I) and (/, g, w, v)). 

(57) With a certain possibility, Alice and Bob reveal some bits to check the entangle- 
and-measure attack when particles are travelling from Alice to Bob. If there are no attacks, 
Alice's bits and Bob's bits should have the deterministic correlation {i n =| x n — k n \, j n =\ 
y n — l n |, f n =\ r n — w n |, g n =\ s n — v n |). The communication continues. Otherwise, Bob 
publicly tells Alice that Eve is in the line, and the communication is aborted. 

(58) Bob decodes Alice's secret bits as (i n — | x n — k n |, j n —\ y n — l n |, f n =\ r n — w n |, 
gn =| s n — v n |), and he reads the 3 bits of information. If he publicly announces the 
values of (x n ,y n ,r n , s n ) , then Alice can also decode Bob's secret bits as {k n —\ x n — i n |, 
In =| Vn — jn \, w n =\ r n — f n |, v n =\ s n — g n |), and she read the 3 bits of information, too. 
Then the procedure goes to S2, and Bob and Alice continue to transmit their next bits. The 
dialogue has been successfully completed. 

In some cases, Alice and Bob can take some bits as checking bits, and they can reveal the 
value of the checking bits to check for the entangle-and-measure attack when the two 
qubits are travelling from Alice to Bob; i.e., Bob takes (k n , l n ) as secret bits and (w n , v n ) as 
checking bits. Alice takes (i n ,jn) as secret bits and (f n ,g n ) as checking bits, and publicly 
reveals the value of the checking bits. Then, Bob checks for Eves: if both f n =| r n — w n \ 
and g n =| s n — v n \, Bob holds; there are no Eves measuring the two qubits (t n , p n ). The 
communication is secure. Otherwise, Bob and Alice have to discard their transmission and 
abort the communication. 

In conclusion, we have proposed a new quantum dialogue protocol for two legitimate 
parties to exchange their secret messages simultaneously by using the GHZ state. The result 
shows that, for such a GHZ state quantum channel, a quantum dialogue can be realized 
between two users successfully. Compared with previous schemes, there are some differences 
in scheme proposed in this paper. Firstly, the quantum channel is different. Secondly, 
because the encoding- decoding particles are sent with a large number of checking particles 
simultaneously through two different quantum channels, it is hard for Eve to catch the right 
two particles in one group of the encoding-decoding groups simultaneously. Thus, the total 
probability of an eavesdrop by Eve is very small. This scheme can also be generalized to 
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the A-particle GHZ state system; Bob keeps particle 1 with him in each iV-particle GHZ 
state and sends the remaining N — 1 particles to Alice. Thus, N — 1 channels are needed, 
so the total probability of an eavesdrop by Eve will go down with increasing number of 
channels. Thirdly, Alice and Bob can take some bits as checking bits and reveal the value 
of the checking bits to check for the entangle-and-measure attack when the qubits are sent 



from Alice to Bob, making sure 
subtle use of superdense coding 



;he communication is secure. Fourthly, the protocol makes 
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12 1 to double the quantum channel, and each party 
is able at the same time to send three secret bits information and to read three secret 
bits information. The efficiency of information transmission is successfully increased. The 
intercept-and-resend attack, as well as the entangle-and-measure attack, can be detected 
efficiently in our protocol. Though it is experimentally more difficult to prepare GHZ states 
as compared to EPR states, for such a GHZ state quantum channel, we can not only increase 
the effective information but also improve the security in our protocol, so our protocol is 
feasible. 



[1] C. H. Bennett and G. Brassard, Proceedings of IEEE International Conference on Computers, 
Systems and Signal Proceessing, Bangalore, IEEE, New York, 175 (1984). 

[2] A. Beige, B. G. Englert, C. Kurtsiefer, and H. Weinfurter, Acta. Phys. Pol. A 101, 357 (2002). 

[3] B. S. Shi, Y. K. Jiang, and G. C. Guo, Appl. Phys. B: Laser Opt. B 70, 022317 (2002). 

[4] P. Xue, C. F. Li, and G. C. Guo, Phys. Rev. A 65, 022317 (2002). 

[5] D. Song, Phys. Rev. A 68, 034301 (2004). 

[6] X. B. Wang, Phys. Rev. Lett. 92, 077902 (2004). 

[7] K. Bostroem and T. Felbinger, Phys. Rev. Lett. 89, 187902 (2002). 

[8] F. G. Deng, G. L. Long, and X. S. Liu, Phys. Rev. A 68, 042317 (2003). 

[9] Z. X. Man, Z. J. Zhang, and Y. Li, Chin. Phys. Lett. 22, 18 (2005). 

[10] Y. Xia, C. B. Fu, F. Y. Li, S. Zhang, K. H. Yeon, and C. I. Urn, J. Korean Phys. Soc. 47, 753 
(2005). 

[11] B. A. Nguyen, Phys. Lett. A 328, 6 (2004). 

[12] Z. X. Man, Z. J. Zhang, and Y. Li, Chin. Phys. Lett. 22, 22 (2005). 

[13] A. Wojcik, Phys. Rev. Lett. 90, 157901 (2003). 



8 



[14] Z. J. Zhang, Z. X. Man, and Y. Li, Phys. Lett. A 333, 46 (2004). 
[15] C. H. Bennett and S. J. Wiesner, Phys. Rev. Lett. 69, 2881 (1992). 
[16] F. L. Yan and M. Y. Wang, Chin. Phys. Lett. 21, 1195 (2004). 

[17] Q. B. Fan, L. L. Sun, F. Y. Li, Z. Jin, S. Zhang, K. H. Yeon, and C. I. Urn, J. Korean Phys. 
Soc. 46, 769 (2005). 



